中国电力 ›› 2024, Vol. 57 ›› Issue (8): 130-137.DOI: 10.11930/j.issn.1004-9649.202311036

• 电网 • 上一篇    下一篇

虚拟电厂网络安全风险评估指标体系构建及量化计算

杨珂1,2(), 王栋1,3(), 李达1,3(), 张王俊4, 向尕5, 李军5   

  1. 1. 国网数字科技控股有限公司,北京 100053
    2. 国网区块链科技(北京)有限公司,北京 100053
    3. 国网区块链应用技术实验室,北京 100053
    4. 国网上海市电力公司,上海 200122
    5. 北京信息科技大学,北京 100192
  • 收稿日期:2023-11-08 出版日期:2024-08-28 发布日期:2024-08-24
  • 作者简介:杨珂(1990—),男,博士,高级工程师,从事能源区块链安全研究,E-mail:yangke@sgdt.sgcc.com.cn
    王栋(1985—),男,硕士,高级工程师,从事信息安全研究,E-mail:wangdong@sgdt.sgcc.com.cn
    李达(1991—),男,通信作者,硕士,从事电力系统自动化研究,E-mail:lida@sgdt.sgcc.com.cn
  • 基金资助:
    国家电网有限公司科技项目(5700-202217192A-1-1-ZN)。

Network Security Risk Assessment Index System and Calculation for Virtual Power Plant

Ke YANG1,2(), Dong WANG1,3(), Da LI1,3(), Wangjun ZHANG4, Ga XIANG5, Jun LI5   

  1. 1. State Grid Digital Technology Holding Co., Ltd., Beijing 100053, China
    2. State Grid Blockchain Technology (Beijing) Co., Ltd., Beijing 100053, China
    3. State Grid Blockchain Application Technology Laboratory, Beijing 100053, China
    4. State Grid Shanghai Electric Power Co., Shanghai 200122, China
    5. Beijing Information Science and Technology University, Beijing 100192, China
  • Received:2023-11-08 Online:2024-08-28 Published:2024-08-24
  • Supported by:
    This work is supported by Science and Technology Project of SGCC (No.5700-202217192A-1-1-ZN).

摘要:

提出了静态与动态风险评估相结合的多维动态网络安全风险评估指标体系。基于虚拟电厂的特点进行网络安全风险分析,构筑多维静态风险评估指标。基于攻击路径演化机理,对信息侧、物理侧和信息-物理侧进行数据采集,构筑动态风险评估指标。提出指标量化计算方法。通过仿真实验验证本文所提的指标体系及量化计算方法能够有效评估安全性,识别风险隐患,提出有效的加固措施。

关键词: 虚拟电厂, 公网与专网互动, 风险评估, 指标体系

Abstract:

In this paper, we propose a multidimensional dynamic risk assessment index system for the new system of virtual power plants. Firstly, based on the characteristics of the virtual power plant, a static risk assessment index system is built; a dynamic risk assessment index system is constructed, based on the evolution mechanism of attack paths, and collects data from information, physical and the information physical sides. Then, we propose a quantitative assessment method. Finally, the simulation experiment is carried out to validate the multi-dimensional dynamic risk assessment index system proposed in this paper, which can assess the network risk of the virtual power plant, identify potential risks, and propose valid enhancement measures.

Key words: virtual power plant, interaction between public network and private network, risk assessment, index system